Senior Application Security Engineer

ADP is hiring a Senior Application Security Engineer in our Alpharetta, GA or Roseland, NJ office. This is a hybrid role.

We are seeking a Senior Application Security Engineer to secure our software supply chain by assessing, governing, and mitigating risks associated with open‑source software. This role partners closely with engineering, Dev Ops, and security teams to drive secure OSS adoption at scale.

• Generate and analyze SBOMs and conduct OSS security assessments using tools like Snyk and Syft.
• Evaluate and onboard security tools through POCs.
• Build and operate cloud‑based data pipelines to identify vulnerabilities, license risks, and supply chain threats.
• Develop dashboards and reports to communicate security risk to engineering teams and leadership.
• Design and integrate OSS security tooling, including JFrog Artifactory/Xray or Sonatype Nexus/Lifecycle.
• Partner with engineering teams to guide secure open‑source usage and remediation.
• Support incident response efforts, including zero‑day vulnerability management.
• Create OSS security standards, documentation, and training materials.

• 7+ years of experience in cybersecurity, application security, or software supply chain security.
• Hands‑on experience with SBOMs, OSS scanning tools, and vulnerability management.
• Experience with JFrog or Sonatype artifact repository platforms.
• Strong background in cloud‑native security and automation.
• Primary qualification:
  Python, AWS + Kubernetes + SQL + Security certifications (CISSP, CSSLP, etc.) are a plus.

• You’ll have a bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).

• Programming:
  Python; npm / Node.js ecosystems
• Cloud & Platforms: AWS, Kubernetes, SQL
• OSS & Supply Chain: JFrog Artifactory/Xray, Sonatype Nexus/Lifecycle
• Reporting & Monitoring:
  Amazon Quick Sight, Prometheus

• Knowledge of OWASP, NIST, and secure SDLC practices.
• Strong communication and cross‑functional collaboration skills.
• Security certifications (CISSP, CSSLP, etc.) are a plus.

Base salary offers for this position may vary based on factors such as location, skills, and relevant experience. Some positions may include additional compensation in the form of bonus, equity or commissions. We offer the following benefits:
Medical, Dental, Vision, Life Insurance, Matched Retirement Savings, Wellness Program, Short‑and Long‑Term Disability, Charitable Contribution Match, Holidays, Personal Days & Vacation, Paid Volunteer Time Off, and more. The compensation for this role is $0.00 - $0.00 / Year.

• Actual compensation will not be less than the applicable minimum wage or minimum exempt salary requirement under federal, state and local laws.

Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP: ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability.

Hiring decisions are based upon ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance.